high7.8Public exploit code
CVE-2018-6084
Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Google Software Updater macOS - Unsafe use of Distributed Objects Privilege Escalation2018-03-20 · local · macos · Verified
Impact
Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via an executable file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | before 66.0.3359.117 | |
| Debian | Debian Linux | Version 9.0 |
| Redhat | Enterprise Linux Desktop | Version 6.0 |
| Redhat | Enterprise Linux Server | Version 6.0 |
| Redhat | Enterprise Linux Workstation | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/103468
- http://www.securityfocus.com/bid/103917
- https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html
- https://crbug.com/822424
- https://www.exploit-db.com/exploits/44307/
- http://www.securityfocus.com/bid/103468
- http://www.securityfocus.com/bid/103917
- https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html
- https://crbug.com/822424
- https://www.exploit-db.com/exploits/44307/